Quad9 DNS Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://m.tiktok.shop/s/AJTZXuOWzsus
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://m.tiktok.shop/s/AJTZXuOWzsus
- Submitted IP / ASN
95.101.10.105 AS20940 · Akamai International B.V.
- Final URL
- https://apps.shopify.com/tiktok?channel=email
- Final IP / ASN
23.227.39.20 AS13335 · CLOUDFLARENET
Final page
- Page title
- TikTok - Launch TikTok Ads and sell directly via TikTok Shop | Shopify App Store
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 241.9 KB (247732 bytes)
Detections
Activity
- HTTP requests
- 135
- Observed hosts
- 17
- Script records
- 975
Estimated HTTP data
- Sent
- ~84.8 KB
- Received
- ~14.33 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| error-analytics-sessions-production.shopifysvc.com | 24150 | 2017-09-29 | 2024-12-03 | 2026-06-08 | 638 B | 0 B | Not recorded | |
| apps.shopify.com | 102042 | 2005-03-11 | 2012-10-25 | 2026-06-01 | 17.5 KB | 1.89 MB | 23.227.39.20 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Stimulus JavaScript frameworks A modest JavaScript framework for the HTML you already have. YouTube Video players YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos. Ruby on Rails Web frameworks Ruby on Rails is a server-side web application framework written in Ruby under the MIT License. Ruby Programming languages Ruby is an open-source object-oriented programming language. |
| jnn-pa.googleapis.com | 1579 | 2005-01-25 | 2021-11-16 | 2026-06-08 | 3.7 KB | 3.3 KB |  216.239.38.223 | |
| www.youtube-nocookie.com | 20734 | 2009-01-23 | 2012-05-31 | 2026-06-11 | 18.3 KB | 10.18 MB | 142.250.178.46 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| lf16-scmcdn.oecstatic.com | 429900 | 2022-02-21 | 2022-06-04 | 2026-05-07 | 7.9 KB | 983.3 KB | 95.101.10.67 | |
| mcs-va.tiktokv.com | 163427 | 2017-09-20 | 2020-10-14 | 2026-06-09 | 3.3 KB | 6.4 KB | 95.101.10.106 | |
| i.ytimg.com | 436 | 2007-12-11 | 2012-10-03 | 2026-06-08 | 3.2 KB | 46.3 KB | 142.250.178.54 | |
| www.gstatic.com | 146047 | 2008-02-11 | 2012-05-29 | 2026-06-07 | 1.5 KB | 3.6 KB | 142.250.178.99 | |
| sf16-short-va.bytedapm.com | 253075 | 2021-12-03 | 2021-12-20 | 2026-06-04 | 523 B | 23.6 KB | 95.101.10.66 | |
| cdn.shopify.com | 3587 | 2005-03-11 | 2012-06-22 | 2026-06-08 | 15.3 KB | 809.4 KB | 23.227.39.200 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| www.google.com | 22 | 1997-09-15 | 2015-05-10 | 2026-06-07 | 1.5 KB | 184.2 KB | 142.251.151.119 | |
| monorail-edge.shopifysvc.com | 11124 | 2017-09-29 | 2019-08-29 | 2026-06-08 | 5.5 KB | 8.7 KB | 34.8.119.189 | Google Cloud CDN CDN Cloud CDN uses Google's global edge network to serve content closer to users. Google Cloud IaaS Google Cloud is a suite of cloud computing services. |
| mon-va.byteoversea.com | 68022 | 2017-09-20 | 2018-12-03 | 2026-06-04 | 671 B | 999 B | 71.18.222.1 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| yt3.ggpht.com | 1275 | 2008-01-16 | 2014-01-15 | 2026-06-08 | 636 B | 2.0 KB | 142.250.178.33 | |
| fonts.gstatic.com | N/A | 2008-02-11 | 2014-04-02 | 2026-06-07 | 3.4 KB | 239.9 KB | 142.250.178.99 | |
| m.tiktok.shop 1 alerts | 2258807 | 2020-11-28 | 2022-10-17 | 2026-06-04 | 496 B | 1.5 KB | 95.101.10.209 | |
| shopify.bytegration.com | 4649665 | 2020-09-15 | 2021-06-19 | 2026-05-07 | 844 B | 3.0 KB | 95.101.10.200 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Lodash JavaScript libraries Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm. dc.js JavaScript graphics, JavaScript libraries A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js |